Re: Strange aaazzzaaazzz junks

[wietse@xxxxxxxxxxxxx (Wietse Venema)]

Xin LI:
-- Start of PGP signed section.
> Hi everyone,
> 
> I have noticed that two of postfix+mailman deployments (one is FreeBSD.org
> and another is postifix.org) sends something like "aaazzzaaazzzaaazzz" when
> it is sending ordinary mails.

postfix.org is majordomo based, not mailman.

> As far as I can tell (and with kind help of FreeBSD.org's postmaster):
> 	o The mail is actually logged by postfix.
> 	o Most times it contains no header information, and just some
> 	  aaazzz's.
> 	o Sometimes, the outgoing mail even does not conform RFC2821,
> 	  for example, no "EHLO" or "RCPT" is sent before it is sending
> 	  data

You may have a bad NAT or bandwidth manager or other active
component that mixes up data streams.

	Wietse

> 	o The remote (say, the server sending aaazzz's) is dealing
> 	  with bounces correctly.  With a strict RFC2821 check on
> 	  my mail server, these mail will finally bounced and my
> 	  subscription is being disabled due to this issue.
> 
> I have noticed this phenomena about one year ago and I used to consider
> this a FreeBSD.org specific issue.  However, unfortunatelly, I found that
> there are some logs saying that postfix.org is sending these today.
> 
> If this is a common issue, I think it would be valuable to investigate
> more deeply.
> 
> Some of my logs is as follows:
> 
> Sep  1 22:25:52 beastie postfix/smtpd[497]: warning: Unable to look up NS host dnsauth3.sys.gtei.net for Helo command english-breakfast.cloud9.net: Host not found
> Sep  1 22:25:52 beastie postfix/smtpd[497]: 01265130E45: client=english-breakfast.cloud9.net[168.100.1.9]
> Sep  1 22:25:52 beastie postfix/cleanup[486]: 01265130E45: message-id=<20040901142345.01265130E45@xxxxxxxxxxxxxxxxxxxxx>
> Sep  1 22:25:52 beastie postfix/cleanup[486]: 01265130E45: discard: body aaazzzaaazzzaaazzzaaazzzaaazzz from english-breakfast.cloud9.net[168.100.1.9]; from=<owner-postfix-users@xxxxxxxxxxx> to=<delphij@xxxxxxxxxxxxx> proto=ESMTP helo=<english-breakfast.cloud9.net>: "aaazzz Junk"
> Sep  1 22:29:05 beastie postfix/smtpd[497]: disconnect from english-breakfast.cloud9.net[168.100.1.9]
> 
> My own server is runninng postfix 2.1.4 with TLS configuration.  My
> time zone is GMT+08:00.
> 
> The problem is really strange, but as I stated at the beginning of this
> letter, this is more likely a postfix issue rather than a mailman issue,
> as it seems that the remote client is actually dealing with bounces.
> 
> If there is anything I did not described clearly, please let me know.
> Additional information is available upon request.
> 
> Thanks in advance!
> 
> Cheers,
> -- 
> Xin LI <delphij frontfree net>	http://www.delphij.net/
> See complete headers for GPG key and other information.
> 
-- End of PGP section.